commit 60b2a4e7c0a15d85b4bea8181e29aae0a64c36d6
author android-build-team Robot <android-build-team-robot@google.com> Wed Nov 07 04:11:46 2018 +0000
committer android-build-team Robot <android-build-team-robot@google.com> Wed Nov 07 04:11:46 2018 +0000
tree 8cd98b4e9c39f8cca7d8fa493050a2c98200be47
parent 05c7f27079bd44595cc3efb4b9acb1aa6777716c
parent 07b99dca6d9822b4097320d052bf7ff0122026ed

Snap for 5115288 from 07b99dca6d9822b4097320d052bf7ff0122026ed to pi-qpr2-release

Change-Id: I8b1b147c78f66ca1ca4f2ef9dface42654777e34

src/ap/wnm_ap.c

diff --git a/src/ap/wnm_ap.c b/src/ap/wnm_ap.c
index 7c4fde0..adb66c1 100644
--- a/src/ap/wnm_ap.c
+++ b/src/ap/wnm_ap.c
@@ -200,6 +200,13 @@
 	u8 *tfsreq_ie_end = NULL;
 	u16 tfsreq_ie_len = 0;
 
+	if (len < 1) {
+		wpa_printf(MSG_DEBUG,
+			   "WNM: Ignore too short WNM-Sleep Mode Request from "
+			   MACSTR, MAC2STR(addr));
+		return;
+	}
+
 	dialog_token = *pos++;
 	while (pos + 1 < frm + len) {
 		u8 ie_len = pos[1];